Carespring Health Care Management Data Breach Settlement
Carespring Health Care Management, an Ohio-based nursing and eldercare facility operator, has reached a class action settlement following an October 2023 ransomware attack by the NoEscape group that stole 364 GB of data, compromising the personal and medical information of approximately 76,719 individuals. Affected individuals may file a claim by April 16, 2026.
What Happened?
Carespring Health Care Management experienced a ransomware attack between October 12-30, 2023 that resulted in the theft of 364 GB of sensitive data, including names, dates of birth, Social Security numbers, health insurance details, and medical information. Approximately 44,000 individuals are covered by the settlement class. The lawsuit alleges Carespring failed to implement adequate cybersecurity measures to protect patient information.
Who Is Eligible?
You may be eligible if your personal or medical information was compromised in the Carespring data breach. This primarily affects patients and residents of Carespring facilities. Affected individuals should have received a settlement notice with a unique ID and PIN.
What Benefits Are Available?
Eligible class members may receive:
- Up to $4,500 for documented out-of-pocket losses (identity theft, fraud, credit monitoring costs)
- A $50 alternative cash payment (no documentation required)
- Two years of single-bureau credit monitoring
How to File Before the Deadline
Submit your claim through the official Carespring Data Settlement website using your unique ID and PIN from your settlement notice.
- Claim Deadline: April 16, 2026
- Case Type: Healthcare data breach / ransomware
OpenClassActions.org is not affiliated with Carespring Health Care Management or the settlement administrator. This page is for informational purposes only and does not constitute legal advice.